Practice for the AWS Certified Cloud Practitioner (CLF-C02) exam with 16 exam-style practice questions, instant answer reveals, and concise explanations of every correct answer. Topics include: According to the AWS Shared Responsibility Model, which of the following are the responsibilities of the customer? (Sele. Follow @CertPunch and visit certpunch.com for more certification practice exams and study content.
Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the AWS Certified Cloud Practitioner (CLF-C02) practice test →
What you will practice
- According to the AWS Shared Responsibility Model, which of the following are the responsibilities of the cust…
- Which AWS service can be used to automate code deployment to Amazon Elastic Compute Cloud (Amazon EC2) instan…
- Which of the following are correct statements regarding the AWS Shared Responsibility Model? (Select two)
- Which of the following is the best way to protect your data from accidental deletion on Amazon S3?
- Which of the following cloud computing models does the Gmail service represent?
- A medical device company is looking for a durable and cost-effective way of storing their historic data. Due…
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. According to the AWS Shared Responsibility Model, which of the following are the responsibilities of the customer? (Select two)
Answer: A,D. Operating system patches and updates of an Amazon Elastic Compute Cloud (Amazon EC2) instance || Managing IAM users and roles
Under the Shared Responsibility Model, customers handle security in the cloud, including EC2 operating system patches and IAM management. AWS is responsible for the global network security and protecting the underlying physical infrastructure.
Q2. Which AWS service can be used to automate code deployment to Amazon Elastic Compute Cloud (Amazon EC2) instances as well as on-premises instances?
Answer: A. AWS CodeDeploy
AWS CodeDeploy is correct because it specifically automates software deployments to both Amazon EC2 instances and on-premises servers. Remember that AWS CodePipeline only orchestrates the overall continuous delivery workflow by integrating various tools, while AWS CodeCommit securely hosts the source code repositories.
Q3. Which of the following are correct statements regarding the AWS Shared Responsibility Model? (Select two)
Answer: A,C. AWS is responsible for Security 'of' the Cloud || For abstracted services like Amazon S3, AWS operates the infrastructure layer, the operating system, and platforms
AWS is responsible for security of the cloud, managing the physical infrastructure and host operating systems. For abstracted services like S3, AWS fully manages the underlying platform, whereas customers handle guest operating systems and application security.
Q4. Which of the following is the best way to protect your data from accidental deletion on Amazon S3?
Answer: B. Amazon S3 Versioning
Amazon S3 Versioning is the right choice because it preserves, retrieves, and restores every variant of an object, directly protecting against accidental deletion or overwrites. Lifecycle rules move data between storage classes, while Transfer Acceleration simply improves upload speeds.
Q5. Which of the following cloud computing models does the Gmail service represent?
Answer: C. Software as a service (SaaS)
Gmail represents Software as a Service because it provides a complete, fully managed application directly to the end user over the internet. For the exam, associate SaaS with finished applications managed entirely by the provider, whereas IaaS and PaaS require you to build or manage components.
Q6. A medical device company is looking for a durable and cost-effective way of storing their historic data. Due to compliance requirements, the data must be stored for 10 years. Which AWS Storage solution will you suggest?
Answer: A. Amazon S3 Glacier Deep Archive
Amazon S3 Glacier Deep Archive is the lowest-cost storage class, explicitly designed for long-term retention of data to meet strict regulatory compliance. While Glacier Flexible Retrieval is also for archives, it costs slightly more than the Deep Archive tier.
Q7. A leading research firm needs to access information available in old patents and documents (such as PDFs, Text Files, Word documents, etc) present in its huge knowledge base. The firm is looking for a powerful search tool that can dig into…
Answer: C. Amazon Kendra
Amazon Kendra is an intelligent search service that uses machine learning to extract precise answers from unstructured data like PDFs and text files. Remember that Comprehend only extracts insights and entities from text, whereas Kendra functions as a natural language search engine.
Q8. A development team is looking for a forum where the most frequent questions and requests from AWS customers are listed along with AWS provided solutions. Which AWS forum/service can be used for troubleshooting an issue or checking for a so…
Answer: C. AWS Knowledge Center
The AWS Knowledge Center provides actionable solutions to the most frequent requests and common problems faced by AWS customers. The Support Center is a strong distractor, but it is used to open and manage technical support cases rather than browse self-service articles.
Q9. Which Amazon Simple Storage Service (Amazon S3) storage class offers the lowest availability?
Answer: B. Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA)
S3 One Zone-Infrequent Access stores data in a single Availability Zone, giving it the lowest availability of all S3 classes. Standard and Intelligent-Tiering span multiple Availability Zones, while Glacier is primarily designed for long-term archival.
Q10. Which Amazon Route 53 routing policy would you use when you want to route your traffic in an active-passive configuration?
Answer: C. Failover routing
Failover routing routes traffic to a secondary resource only when the primary resource fails health checks, creating an active-passive setup. Weighted routing splits traffic proportionally, which is used for load balancing or testing rather than simple failover.
Q11. Which AWS service can be used as an in-memory database with high-performance and low latency?
Answer: B. Amazon ElastiCache
ElastiCache is a fully managed in-memory data store that delivers microsecond latency for caching and real-time workloads. RDS relies on disk-backed storage, and DynamoDB is a serverless NoSQL database, so neither provides true in-memory performance.
Q12. Which of the following AWS entities provides the information required to launch an Amazon Elastic Compute Cloud (Amazon EC2) instance?
Answer: B. Amazon Machine Image (AMI)
An Amazon Machine Image provides the required template information to launch an instance, including the operating system. EBS provides block storage, EFS provides file storage, and Lambda runs serverless code without requiring a launch template.
Q13. Which of the following AWS services specialize in data migration from on-premises to AWS Cloud? (Select two)
Answer: C,E. AWS Database Migration Service (AWS DMS) || AWS Snowball
Database Migration Service and Snowball directly facilitate large-scale data migration into AWS. Direct Connect and Site-to-Site VPN establish network connectivity but require you to provide the actual transfer mechanisms.
Q14. Under the AWS Shared Responsibility Model, which of the following is the responsibility of a customer regarding AWS Lambda?
Answer: D. Maintain versions of an AWS Lambda function
Maintaining function versions is the correct answer because managing code and platform configurations remains the customer's responsibility under the shared responsibility model. AWS manages the underlying infrastructure and runtime environments, so patching operating systems or networking components is handled automatically by the provider.
Q15. Which of the following AWS services have data encryption automatically enabled? (Select two.)
Answer: C,E. AWS Storage Gateway || Amazon Simple Storage Service (Amazon S3)
Amazon S3 and AWS Storage Gateway both have encryption enabled automatically by default to protect your data. For the exam, remember that you must manually enable encryption on other storage services like EBS and EFS.
Q16. Which of the following AWS services offer block-level storage? (Select two)
Answer: D,E. Instance Store || Amazon Elastic Block Store (Amazon EBS)
Instance Store and Amazon Elastic Block Store provide block-level storage. For the exam, remember that S3 is object storage, EFS is file storage, and ECS is a container orchestration service, not a storage type.
More AWS Certified Cloud Practitioner (CLF-C02) drills and other practice exams are on @CertPunch. New rounds drop every few days at certpunch.com.